Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/V1solzZQqeZ3Hgtn7rpT0Y-H8pA.roa
File: V1solzZQqeZ3Hgtn7rpT0Y-H8pA.roa (raw, json)
Hash identifier: oD0wt1z2QEeaUVWMI8GL44I3N9MWSXUYbFv4njwH5iA=
Subject key identifier: 57:5B:28:97:36:50:A9:E6:77:1E:0B:67:EE:BA:53:D1:8F:87:F2:90
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 0BE332CE
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/V1solzZQqeZ3Hgtn7rpT0Y-H8pA.roa
Signing time: Sat 01 Jan 2022 08:56:30 +0000
ROA not before: Sat 01 Jan 2022 08:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42082
IP address blocks: 91.151.128.0/20 maxlen: 24
185.146.176.0/22 maxlen: 24
2a03:3580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199439054 (0xbe332ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Jan 1 08:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=575b28973650a9e6771e0b67eeba53d18f87f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:6b:bd:a3:e1:b7:e4:84:ff:1b:36:0c:05:
92:20:2b:d7:53:f8:d2:32:99:56:07:77:df:c3:cb:
6d:ec:47:b8:61:da:5f:94:e1:7f:29:38:e2:1b:f3:
95:59:9b:10:24:1b:2d:31:d6:77:36:57:42:d4:46:
aa:f9:a5:e1:0f:4e:e3:d4:fd:4c:e6:63:6c:47:fc:
79:fb:f0:87:9f:92:8c:df:a8:43:52:b1:2f:73:0a:
b3:14:3c:95:5e:29:b8:58:92:48:65:20:df:52:1b:
d3:eb:14:4e:97:f4:9e:bd:bd:d0:5e:26:22:6a:a8:
bf:33:63:02:cd:16:07:9c:55:86:55:89:30:bb:7b:
66:64:fb:05:b5:3f:ce:5e:2e:9a:ef:e9:e5:95:69:
ac:b7:6b:53:cd:68:3d:c2:3d:10:e6:a1:85:b6:4e:
f1:6f:51:0f:00:06:d3:a9:3b:b6:a1:bf:b9:cb:a9:
fa:97:76:5a:f4:2c:50:06:0e:13:99:21:31:11:70:
3a:d0:49:10:31:87:ea:80:7f:03:d3:5f:08:62:e2:
aa:37:df:a0:1f:51:7f:7b:47:2a:15:53:34:98:78:
86:2b:ec:b7:83:c8:7f:16:e5:70:e4:82:a2:b9:1a:
b7:0c:b9:50:68:67:83:96:5f:f3:e7:c1:37:77:5f:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:28:97:36:50:A9:E6:77:1E:0B:67:EE:BA:53:D1:8F:87:F2:90
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/V1solzZQqeZ3Hgtn7rpT0Y-H8pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.128.0/20
185.146.176.0/22
IPv6:
2a03:3580::/32
Signature Algorithm: sha256WithRSAEncryption
2a:55:88:19:ed:42:bd:d5:e5:b6:e6:05:29:8e:d2:5b:17:2c:
f3:f2:7a:55:07:af:f9:8f:c0:57:b4:bd:cf:82:7f:6d:32:36:
0f:e7:75:dd:7e:63:43:f2:6e:d0:e2:6f:a2:7a:50:02:91:ec:
cb:c6:39:87:43:d7:ee:1c:ff:5c:15:ca:5d:86:2f:da:36:e7:
c1:e9:82:0b:8a:0d:ca:91:d1:41:81:e3:df:0c:7c:b4:0c:9f:
2c:50:d2:3f:d5:4b:be:3a:0b:19:15:17:30:4d:a9:52:9c:e2:
38:54:7f:08:32:7c:25:4f:e1:ac:cd:b6:32:0c:25:89:2b:af:
89:49:ce:1c:51:eb:38:de:22:c3:5b:6a:d2:82:d4:4a:96:e7:
8f:fd:5b:2a:83:39:b2:71:73:c4:73:31:91:c7:d6:4e:90:b7:
4a:a7:2f:0e:87:48:20:7d:57:e7:6a:b5:3b:b0:0a:f5:0f:bc:
7b:e2:cd:99:d4:4f:3a:a1:fe:13:15:c2:10:2e:17:e1:62:64:
87:78:6f:43:2b:8a:41:4f:93:8b:43:3d:cb:8d:cf:9b:45:d1:
2f:e3:b0:07:ff:34:b0:c5:b9:35:1f:ff:1b:1f:d8:93:30:4b:
9e:81:df:c2:b5:ea:08:58:c4:82:c0:0c:1b:54:81:af:94:fc:
6c:ed:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:54 2025 by rpki-client